Dave Yadallee's personal blog

note replace server with FQDN.





From Akadia SSH cert page





Step 1: Generate a Private Key



openssl genrsa -des3 (-aes256) -out server.key 1024 (4096)(8192)



Check TLS1.3 for updates



Step 2: Generate a CSR (Certificate Signing Request)



openssl req -new -key server.key -out server.csr



Step 3: Remove Passphrase from Key



cp server.key server.key.org

openssl rsa -in server.key.org -out server.key



The newly created server.key file has no more passphrase in it.



-rw-r--r-- 1 root root 745 Jun 29 12:19 server.csr

-rw-r--r-- 1 root root 891 Jun 29 13:22 server.key

-rw-r--r-- 1 root root 963 Jun 29 13:22 server.key.org





Step 4: Generating a Self-Signed Certificate



openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt